So I wanted to play around with some of the hooking features that are provided with ImmLib, and I figured that a packet sniffer would be the way to go. Now, of course I can never replace what pcap-based sniffers do, but protocol dissection isn't the name of the game.

My simple writeup of !packets is at here ("http://forum.immunityinc.com/?topic=54.0")



https://www.openrce.org/blog/view/889/Packet_Sniffing_With_ImmunityDebugger